php and html nugget plugins - why two plugins?

gwilsonmail · Post by **gwilsonmail** » Wed Aug 03, 2005 2:03 am

Out of curiosity why do we need to have both plugins?

php can generate html code and html code can contain php directives.

mgroeninger · Post by **mgroeninger** » Wed Aug 03, 2005 3:42 am

html cannot contain php.... There is no way (in the standard client server relationship) the client can execute any php on the server other then by a web request, which is controlled execution.

As to why there are two different plugins, the php nugget is a serious security risk. It would allow anyone who has sufficient login privileges or database access to run any piece of code on your server.

It should not be used unless you know what risk you are assuming.

However, the html nugget is safe for a wide deployment...

gwilsonmail · Post by **gwilsonmail** » Wed Aug 03, 2005 4:17 am

thanks